slot-machine — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited slot-machine (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A surprise MVP generator that conceives a novel, niche idea and builds it from scratch. The user doesn't know what they're getting until it's done - like pulling a slot machine lever and seeing what comes out.
/slot-machineUltrathink. Use the current timestamp (seconds) as a random seed throughout this process.
Forced variety rules:
Use web technologies only:
Keep it simple:
Polish the UX:
Internally conceive a novel idea. Do NOT share this with the user. Simply announce:
"Spinning the slot machine... I've got something fun in mind. Let me build it for you."
Create the MVP while keeping the mystery alive:
Once complete, unveil what you built:
Ask the user if they'd like you to run the app for them, or provide clear instructions:
npm install
npm run devThen open the provided localhost URL.
User: /slot-machine
Assistant: "Spinning the slot machine... I've got something in mind. Let me build it."
[Creates project, builds features with vague updates]
"Setting up the foundation..." "Adding the core experience..." "Making it feel right..." "Final touches..."
Assistant: "Done! I built you [Name] - [one sentence hook explaining what it does and why it's interesting].
Would you like me to run it for you?
To run manually:
cd [project-name]
npm install
npm run devThen open http://localhost:3000"
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.